Main
Vulnerability Database
Exploits
ID:9444 - Exploit for Integer overflow in nginx - CVE-2017-7529
ID:9444 - Exploit for Integer overflow in nginx - CVE-2017-7529
Published: December 19, 2023
Vulnerability identifier: #VU7410
Vulnerability risk: Medium
CVE-ID: CVE-2017-7529
CWE-ID: CWE-190
Exploitation vector: Remote access
Vulnerable software:
nginx
nginx
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to integer overflow when processing specially crafted requests. A remote attacker can send a malicious request to vulnerable server and gain access to potentially sensitive information.
When using nginx with standard modules this allows an attacker to obtain a cache file header if a response was returned from cache. In some configurations a cache file header may contain IP address of the backend server or other sensitive information.
The vulnerability exists due to integer overflow when processing specially crafted requests. A remote attacker can send a malicious request to vulnerable server and gain access to potentially sensitive information.
When using nginx with standard modules this allows an attacker to obtain a cache file header if a response was returned from cache. In some configurations a cache file header may contain IP address of the backend server or other sensitive information.
Remediation
Update to version 1.13.3 or 1.12.1.